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(57) Abstract: A method is provided for transferring a set of data over a network by monitoring the level of actual network band- 
width utilization. The method encompasses two embodiments that utilize different algorithms. In a first embodiment, the method 
identifies a maximum monitored level of actual utilization and calculates a threshold level of utilization as a function of the maximum 
monitored level of utilization. The threshold level represents a level below which a set of data, such as a software update, may be 
transferred or downloaded over the network without interfering with other nelwoiic activity at the network interface. If the actual 
level 
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of utilization is less than Ae threshold level, at least a portion or segment of Ae data is received over the network. In a second embod- 
iment, the method identifies a maximum monitored level of actual utilization and calculates a size for data blocks to be transferred as 
a function of the maximum monitored level of utilization. The data blocks represent a segment of a set of data, such a software update 
that may be transferred or downloaded over the network without interfering with other network activity at the network inteifece. 



wo 01/61944 PCT/USOl/04885 

-1- 

SYSTEM AND METHOD FOR TRANSFERRING DATA OVER A NETWORK 

FIELD OF THE INVENTION 
The present invention relates to computer software and, more 
particularly, to a system and method for transferring data over a network such as the 
5 Intemet 

BACKGROUND OF TEE INVENTION 
A computer system in which one or more client machines communicate 
with one or more servers over a network is a common arrangement. For example, tfiere 
are noillions of personal computers (PCs) connected to the Intemet for communication 

10 with various servers. Many of ttiese PC users acquire new or updated software on their 
PCs by downloading the software from a remote server over the Intemet 

Conventional methods of uploading and downloading data, such as new 
and updated software to a PC over a network such as the Intemet interfere with the PC 
user's ability to browse the Intemet or to otherwise communicate over the network 

15 during the download. With increased processing speeds for PCs, it is the bandwidth to 
the Intemet which is becoming a significant bottleneck to the user's browsing 
experience. Because conventional downloads typically occupy 100% of the user's 
available communication bandwidth until the download is complete, the user is unable 
to utilize the network for other tasks during the download. Moreover, if the download 

20 is interrupted for some reason (e.g., the network connection is lost), it may be necessary 
to restart the download from the beginning of the file, thus wasting significant network 
resources. Other conventional downloading software permits the user to schedule the 
download for a designated time. In any event, conventional methods for downloading 
software over a network such as the Intemet severely limit the user's ability to engage 

25 in other network activity. 

Providing software updates is beneficial to PC users because it corrects 
problems and improves the performance of their PCs. Additionally, the software 
vendor benefits from a reduction in the number of product support calls, which in turn 
reduces the substantial resources the vendor might otherwise allocate to handling such 

30 calls. 

Microsoft Corporation provides a software update service in connection 
with its MICROSOFT WINDOWS family of operating system products under the mark 
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"WINDOWS UPDATE". By accessing the "WINDOWS UPDATE" Litemet website, 
MICROSOFT WINDOWS users can have their system evaluated and download both 
critical and non-critical software updates (e.g., a fix or a patch) over the Intemet. Upon 
determining there are updates available which are not already loaded on the user's PC, 
5 the user is notified that such updates are available, and the user is prompted to select 
one or more of them for downloading over the Intemet While this is a convenient 
method for providing software updates to users, such downloads could interfere with 
other network activity. Moreover, it is likely that many users will not take the initiative 
to navigate to the "WINDOWS UPDATE" website and download operating system 
» updates for their PCs. Consequently, users who have not yet downloaded critical 
updates are more likely to encounter problems with their PCs, and they wiU likely call 
the vendor's product support line when a problem arises. 

Accordingly, there is a need for an effective method for downloading 
software updates over a network so that interference with other network activity is 
minimized. One potential solution is simply to increase network bandwidth. However, ' 
increased bandwidth is expensive and has historically been followed by increased user 
- demands. Thus, even as available bandwidth increases with technological advances, 
there will continue to be a need to ehminate interference with other network activity 
because of the corresponding increases in user demands. 

SUMMARY OF THE INVENTION 
In one aspect, the present invention is directed to a method of 
liansfening a set of data over a network. The method includes the steps of monitoring 
the level of actual network bandwidth utilization and identifying a maximmn monitored 
level of actual utiUzation. Then, the method calculates a threshold level of utilization 
as a function of the maximum monitored level of utilization. If the actual level is less 
than the threshold level, at least a portion of the set of data is received over the 
network. 

Another aspect of the present invention is directed to a computer- 
readable medium having stored thereon a data stiiachire which includes a first data field 
and a second data field. The first data field contains data representing a maximum 
monitored level of actual network bandwidth utilization. The second data field 
contains data representing a threshold level of network bandwidth utilization below 
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which data may be transferred over the network without interfering with other network 
activity. The second data field is derived from the first data field by calculating the 
threshold level as a. function of the maximum monitored level. 

Yet another aspect of the present invention involves a computer- 
5 readable medium having computer-executable components for managing the transfer of 
data over a network. The first component is a bandwidth monitoring component which 
monitors the level of actual bandwidth utilization for a network coimection and 
identifies a maximum monitored level of utilization. The second component is a 
threshold calculating component which calculates a threshold level of utilization as a 

10 function of the maximum monitored level of utilization identified by the first 
component. The third component is a transfer management component which manages 
the transfer of data over the network when the level of actual bandwidth utilization is 
less than the threshold level of utilization. 

Still another aspect of the present invention is directed to a method of 

15 communicating between a client process and a server process over a network. The 
method includes issuing to the server process a first download request which identifies 
a file and which requests that the server process download a first segment of the file 
over the network. The method also includes downloading, by the server process, the 
first segment of the file. Then, the method issues to the server process a further 

20 download request which is associated with the file and which requests that the server 
process download a further segment of the file over the network, provided the actual 
network bandwidth utilization is less than a threshold level The method further 
includes downloading, by the server process, the further segment of the file. Finally, 
the method includes repeating the step of issuing a further download request and the 

25 step of downloading the further segment until the server process has downloaded each 
segment of the file over the network. 

In an alternate embodiment of the present invention, an aspect is 
directed to a method of transferring a set of data over a network. The method includes 
the steps of monitoring the level of actual network bandwidth utilization and 

30 identifying an average monitored level of actual utilization. Then, the method 
calculates the size of a data block to be transferred as a function of current activity and 
bandwidth threshold. A block of the computed size is then downloaded . 
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Another aspect of an alternate embodiment of present invention is 
directed to a computer-readable medium having stored thereon a data structure which 
includes a first data field and a second data field. The first data field contains data 
representing a timestamp corresponding to the sample time of network utilization. The 
5 second data field contains data representing the total number of bytes that have passed 
through the network adapter. 

Yet another aspect of an alternate embodiment of the present invention 
involves a computer-readable medium having computer-executable components for 
managing the transfer of data over a network. The first component is a bandwidth 
monitoring component which monitors the level of actual bandwidth utilization for a 
network connection and identifies an average monitored level of utilization. The 
second component is a transfer block size calculating component which calculates the 
block size to be transferred based on utilization as a function of the average level of 
utilization identified by the first component. The third component is a transfer 
15 management component which manages the transfer of data over the network at the 
computed block size. 

Still another aspect of an alternate embodiment of the present invention 
is directed to a method of continuously refining network speed computations and 
consequently data block size computations. The method includes sampling network 
usage at intervals, and computing a moving average of the obtained speeds over a 
number of samples. The most recent sample is given a heavier weighting in the 
averaging computation. The sampling interval of tiie network is adjusted based on the 
speed of the network. 

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING 

The present invention is described in detail below with reference to the 
attached drawing figures, wherein: 

FIG. 1 is a block diagram of a suitable computing system environment 
for use in implementing the present invention; 

HG. 2 is a block diagram of a system including a client machine which 
30 communicates with a server over a network; 

FIG. 3 is a block diagram similar to HG. 2 but with first and second 
client machines connected to one another via an intianet; 
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FIG. 4 is a diagram illustrating network bandwidth utilization over time 
with a curve representing the actual network bandwidth utilization and a broken line 
representing a threshold level of utilization calculated in accordance with the present 
invention; 

5 PIG. 5 is a block diagram illustrating the architecture of a client machine 

in accordance with the present invention; 

FIG. 6 is a block diagram of a data structure according to the present 

invention; 

FIG. 7 is a flowchart representative of a computer program for 
10 transferring data over a network in accordance with the present invention; 

HG. 8 is a diagram illustrating network bandwidth utilization over time 
with a solid curve representing the actual network bandwidth utilization and broken line 
curve representing the observed transfer rate between client and server, and the data 
flow rate through the network in accordance with a further embodiment of the present 
15 invention; 

FIG. 9 is a block diagram of a data structure according to the further 
embodiment of the present invention; and 

FIG. 10 is a flowchart representative of a computer program for 
transferring data over a network in accordance with the further embodiment of the 
20 present invention. 

DETAILED DESCRIPTION OF THE D^VENTION 
The present invention provides a system and method for transferring 
data over a network such as the Intemet 

FIG. 1 illustrates an example of a suitable computing system 
25 environment in which the invention may be implemented The computing system 
environment is only one example of a suitable computing enviroxmient and is not 
intended to suggest any limitation as to the scope of use or functionality of the 
invention. Neither should the computing environment be interpreted as having any 
dependency or requirement relating to any one or , combination of components 
30 illustrated in the exemplary operating environment 

TTie invention is operational with numerous other general purpose or 
special purpose computing system environments or configurations. Examples of weD 
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known computing systems, environments, and/or configurations that may be suitable 
for use with the invention include, but are not limited to. personal computers, server 
computers, hand-held or laptop devices, multiprocessor systems, microprocessor-based 
systems, programmable consumer electronics, network PCs, minicomputers, mainfiame 
i computers, distributed computing environments that include any of the above systems 
or devices, and the like. 

The invention may be described in the general context of computer- 
executable instiiictions, such as program modules, being executed by a computer. 
Generally, program modules include routines, programs, objects, components, data 
structures, etc. that perform particular tasks or implement particular abstract data types. 
The invention may also be practiced in distributed computing environments where 
tasks are performed by remote processing devices that are Unked through a 
communications network. In a distributed computing environment, program modules 
may be located in both local and remote computer storage media including memory 
15 Storage devices. 

With reference to FIG. 1, an exemplary system for implementing the 
invention includes a general purpose computing device in the form of a computer 20. 
Components of computer 20 include, but are not Umited to, a processing unit 22, a 
system memory 24, and a system bus 26 that couples various system components 
including flie system memory to the processing unit 22. The system bus 26 may be any 
of several types of bus structures including a memory bus or memory controller, a 
peripheral bus, and a local bus using any of a variety of bus architectures. By way of 
example, and not limitation, such architectures include Industry Standard Architecture 
(ISA) bus, Micro Channel Architecture (MCA) bus, Enhanced ISA (EISA) bus. Video 
Electronics Standards Association (VESA) local bus, and Peripheral Component 
Interconnect (PCI) bus also known as Mezzanine bus. 

Computer 20 typicaUy includes a variety of computer readable media. 
Computer readable media can be any available media that can be accessed by computer 
20 and includes both volatile and nonvolatile media, removable and non-removable 
media. By way of example, and not limitation, computer readable media may comprise 
computer storage media and communication media. Computer storage media includes 
botii volatile and nonvolatile, removable and non-removable media implemented in any 
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method or technology for storage of information such as computer readable 
instructions, data structures, program modules or other data. Computer storage media 
includes, but is not United to, RAM, ROM, EEPROM, flash memory or other memory 
technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, 

5 magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage 
devices, or any other medium which can be used to store the desired information and 
which can be accessed by computer 20. Communication media typically embodies 
computer readable instructions, data stmctures, program modules or other data in a 
modulated data signal such as a carrier wave or other transport mechanism and includes 

10 any information delivery media. The term "modulated data signal" means a signal that 
has one or more of its characteristics set or changed in such a maimer as to encode 
information in the signal. By way of example, and not limitation, communication 
media includes wired media such as a wired network or direct wired connection, and 
wireless media such as acoustic, RF, infrared and other wireless media. Combinations 

15 of any of the above should also be included within the scope of computer readable 
media. 

The system memory 24 includes computer storage media in the form of 
volatile and/or nonvolatile memory such as read only memory (ROM) 28 and random 
access memory (RAM) 30. A basic input/output system 32 (BIOS), containing the 

20 basic routines that help to transfer infomiation between elements within computer 20, 
such as during start-up, is typically stored in ROM 28. RAM 30 typically contains data 
and/or program modules that are immediately accessible to and/or presently being 
operated on by processing unit 22. By way of example, and not limitation, FIG. 1 
illustrates operating system 46, application programs 48, other program modules 50, 

25 and program data 52. 

The computer 20 may also include other removable/non-removable, 
volatile/nonvolatile computer storage media. By way of example only, FIG. 1 
illustrates a hard disk drive 34 that reads from or writes to non-removable, nonvolatile 
magnetic media, a miagnetic disk drive 36 that reads from or writes to removable, 

30 nonvolatile magnetic disk 38, and an optical disk drive 40 that reads from or writes to a 
removable, nonvolatile optical disk 42 such as a CD ROM or other optical media. 
Other removable/non-removable, volatile/nonvolatile computer storage media that can 
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be used in the exemplary operating environment include, but are not limited to, 
magnetic tape cassettes, flash memory cards, digital video disks, digital video tape, 
BemouUi cartridges, soUd state RAM, solid state ROM, and the like. The hard disk 
drive 34, magnetic disk drive 36, and optical disk drive 40 aie typically connected to 
5 the system bus 26 by a Small Computer System Interface (SCSI) 44. Alternatively, the 
hard disk drive 34, magnetic disk drive 36 and optical disk drive 40 may be connected 
to the system bus 26 by a hard disk drive interface, a magnetic disk drive interface, and 
an optical drive interface, respectively. 

The drives and their associated computer storage media discussed above 
10 and illustrated in HG. 1, provide storage of computer readable instructions, data 
structures, program modules and otiier data for the computer 20. In FIG. 1, for 
example, hard disk drive 34 is illustrated as storing operating system 46, application 
programs 48, otfier program modules 50, and program data 52. Note that these 
components can either be the same as or different from operating system 46, 
15 application programs 48, otiier program modules 50, and program data 52. A user may 
enter commands and information into the computer 20 through input devices such as a 
keyboard 54 and pointing device 56, commonly referred to as a mouse, trackball or 
touch pad. Other input devices (not shown) may include a microphone, joystick, game 
pad, satellite dish, scanner, or the like. These and otiier input devices are often 
20 connected to tiie processing unit 22 tiirough a user input interface 58 or a serial port 
interface 60 tiiat is coupled to die system bus, but may be connected by otiier interface 
and bus structures, such as a parallel port, game port or a universal serial bus (USB). A 
monitor 61 or otiier type of display device is also connected to the system bus 26 via an 
interface, such as a video adapter 62. In addition to tiie monitor 61, computers may 
25 also include other peripheral output devices such as speakers and printers, which may 
be connected through an output peripheral interface. 

The computer 20 may operate in a networked environment using logical 
connections to one or more remote computers, such as a remote computer 64, The 
remote computer 64 may be a personal computer, a server, a router, a network PC, a 
30 peer device or other common network node, and typically includes many or all of flie 
elements described above relative to the computer 20, although only a memory storage 
device has been illustrated in FIG. 1. The logical connections depicted in HG. 1 
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include a local area network (LAN) 66 and a wide area network (WAN) 68, but may 
also include other networks. Such networking environments are commonplace in 
offices, enterprise-wide computer networks, intranets and the Internet 

When used in a LAN networking environment, the computer 20 is 
5 connected to the LAN 66 through a network interface or adapter 70. When used in a 
WAN networking enviroimient, the computer 20 typically includes a modem 72 or 
other means for establishing conununications over the WAN 68, such as the internet. 
The modem 72, which may be internal or extemal, may be coimected to the system bus 
26 via the serial port interface 60 or other appropriate mechanism. In a networked 

10 enviroiunent, program modules depicted relative to the computer 20, or portions 
thereof, may be stored in the remote memory storage device. By way of example, and 
not limitation, FIG. 1 illustrates remote application programs 48 as residing on memory 
device 64. It will be appreciated that the network coimections shown are exemplary 
and other means of establishing a conomunications link between the computers may be 

15 used 

Although many other internal components of the computer 20 are not 
shown, those of ordinary skill in the art will appreciate that such components and the 
interconnection are well known. Accordingly, additional details concerning the internal 
construction of the computer 20 need not be disclosed in connection with the present 
20 invention. 

Those skilled in the art will understand that program modules such as 
the operating system 46, application programs 48 and data 52 are provided to the 
computer 20 via one of its memory storage devices, which may include ROM 28, RAM 
30, hard disk drive 34, magnetic disk drive 36 or optical disk drive 40. Preferably, the 

25 hard disk drive 34 is used to store data 52 and programs, including the operating system 
46 and application programs 48. 

When the computer 20 is turned on or reset, the BIOS 32, which is 
stored in the ROM 28 instructs the processing unit 22 to load the operating system from 
the hard disk drive 34 into the RAM 30. Once the operating system 46 is loaded in 

30 RAM 30, the processing unit 22 executes the operating system code and causes the 
visual elements associated with the user interface of the operating system 46 to be 
displayed on the monitor 61. When an application program 48 is opened by a user, the 



PCT/USOl/04885 

-10- 

program code and relevant data are read from the hard disk drive 34 and stored in RAM 
30. 

With reference to FIG. 2, an exemplary system for practicing the present 
invention is designated generally by reference numeral 74. The system 74 includes a 
5 client machine such as a PC 76 and a communications device 78 such as a modem for 
accessing a network 80 (e.g„ the Ihtemet). A server 82 is also connected to the 
network 80 in a conventional manner. The PC 76 and modem 78 establish a connection 
with the server 82 over the network 80 to facilitate the transfer of data between the 
client and the server. 

10 A system 84 set forth in FIG. 3 is similar to the system 74 of FIG. 2, 

except that the system 84 includes a first client 86A and a second client 86B which are 
connected to one another over a Unk 88 such as an intranet. As with the system 74, the 
communications device 78 (e.g., a modem) estabUshes a connection between the first 
cHent 86A and the network 80. Accordingly, the cUents 86A, 86B can exchange data 

15 Avith the server 82 over the network 80. 

Those skilled in the art will readily appreciate that the present invention 
encompasses many possible variations to the systems 74, 84 shown in HGS. 2 and 3. 
Of course, any number of client and server machines may be connected to the network 
80 (either directly or indirectly). For example, the system 84 could include more than 

20 two client machines, one of which would act as a proxy for the others. In that case, the 
client machines could be connected to one another over an intranet, and the network 
card in the proxy machine could be connected to a router which is linked to the network 
80 over a Tl line. Moreover, the network 80 could be the Internet or any other public 
or private network. Additionally, the communications device 78 may be part of the PC 

25 76 or an independent hardware device. 

In one application of the present invention, the client machine is the PC 
76, the device 78 is a 56 Kbps (Kilobits per second) modem, the network 80 is the 
Intemet, and the server 82 is a website accessible over flie Mtetnet for downloading 
software updates for the operating system of the PC. Referring to HG. 4, a curve 90 

30 represents the level of actual network bandwidth utilization for a client PC accessing 
the Intemet over a period of time. The curve 90 rises from Tq through T2 to reflect the 
flurry of network activity which typicaUy occurs as the user initially accesses the 
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Intemet. Then, after a brief decrease in network activity at T3, the client's actual 
utilization again rises dramatically to a peak at T4. This peak could represent any 
number of possible actions initiated by the client, such as the downloading of a 
webpage or the opening of an email message. While the user at the client machine 
5 reads the web page or the email message, or perhaps listens to music over the Internet, 
the actual network utilization decreases to a significantly lower level fix>m T5 through 

The relatively low level of actual network bandwidth utilization shown 
from T5 through Tg (FIG. 4) is sometimes referred to as "network idle." This concept 

10 differs from "machine idle," which occurs when a PC user is not currently using the 
keyboard or mouse. If the machine remains idle for a period of time, a screen saver 
may be invoked. However, network utilization may be high at the same time the 
machine is idle (e.g., during a download), and the network interface may be "idle" 
when the machine is not. Thus, the present invention is directed to the transfer of a set 

15 of data, such as a software update, over a network at a time when the network 
utilization is relatively low. This transfer of data is intended to be transparent to the 
user, and the user's machine need not be idle during the transfer. This transfer of data 
could just as easily relate to activities initiated by a user action on the PC, such as 
playing video games or downloading music MPS files, eBooks and so on. Moreover, 

20 the data to be transferred may include text, image and/or audio data. The present 
invention is also equally applicable to uploads from the client to the server or other 
communication of data between computers. 

As described below in connection with FIG. 7, the present invention 
monitors the level of actual utiUzation represented by the curve 90 (FIG. 4) and 

25 calculates a threshold level of utilization below which the transfer of data between the 
client and server is not likely to interfere with other network activity. In a preferred 
embodiment, tiie threshold level is equal to approximately 33% of the maximum 
detected level of actual network utilization. As shown in FIG. 4, the threshold level is 
generally designated by reference numeral 92 and is initially set to zero. Network 

30 activity is periodically sampled, and a new threshold level is calculated each time a new 
maximum is identified. At Tj, the level of actual bandwidtii usage is 15 Kbps, which is 
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a new maximum, so the threshold 92 is set to 5 Kbps. The level of actual bandwidth 
usage is again sampled at T2, and another new maximum of 30 Kbps is identified. 
. Consequently, the new threshold 92 is calculated to be 10 Kbps. 

When the level of actual usage 90 drops below the threshold level 92, as 
5 at T3, a brief transfer of data should not significantly interfere with other network 
activity. The transfer of data could be initiated immediately upon first detecting that 
the actual usage is below the threshold level. However, a more conservative approach, 
in that it is more deferential to the user, is to detect at least two consecutive occurrences 
of low usage before initiating a download. In any event, a new maximum of 45 Kbps is 
10 detected at T4, thereby triggering the calculation of an updated threshold level of 15 
Kbps. Consequently, if any data transfer were initiated at T3, then it would be 
immediately suspended at T4. At T5, the actual usage 90 once again drops below the 
threshold level 92. This time, the level of actual usage 90 remains between 5-10 Kbps, 
which is less than the threshold level of 15 Kbps, from T5 to Tg, Thus, the transfer of 

15 data over the network would not interfere with other network activity during this time 
period. 

A preferred architecture of the client of the present invention is set forth 
in HG. 5. A client 94 includes an update client 96, an update engine 98, an update 
downloader 100 and an update applet 102, The cUent 94 is connected to a server such 

20 as via an update website 104 over a pair of links 106, 108, which are preferably HTTP 
(Hypertext Transfer Protocol) links. The update client 96 is responsible for 
notifications and personalization options for the user. The update engine 98 controls 
content interaction with the update site 104 as weU as detection, installation and 
logging of software updates. The update downloader 100 is responsible for 

25 implementing the packet background downloading/throttling and incoming packet 
queue management. The update applet 102 determines the configuration of update 
notifications to the user and other interactions with the user. The backend content and 
catalogs are available from the update site 104. 

The present invention utilizes a data structure 110 illustrated in FIG. 6, 

30 The data stnicture 110 includes a first field 1 12 which contains the maximum identified 
level of actual bandwidth utilization and a second field 114 which contains the 
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threshold level of utilization. As shown in FIG. 4, both the maximum identified level 
and the threshold level can vary over time depending on the level of actual utilization. 
As mentioned above, the threshold level is calculated as a function of the maximum 
identified level of actual usage. Therefore, a new threshold level is calculated each 
5 time a new maximum level is detected 

FIG. 7 sets forth a flowchart representative of a computer program for 
selectively transferring data over a network in accordance with a preferred embodiment 
of the present invention. The program is started at step 120 when certain 
predetermined conditions are present. Typically, the client PC should be turned "on" 

10 and connected to the network before starting the program. While it would be possible 
for the program to establish the connection between the PC and the network, some PC 
users may be startled by the unexpected sound of their modem dialing up the network 
on its own. It is also possible that the client may be connected to another network (e.^., 
a private network) so that access to a webserver is not possible until the client 

15 disconnects from the private network and reconnects to the Internet. It can be 
confirmed that the client and server are connected to the same network by "pinging" the 
server and receiving an acknowledgment from the server. Those skilled in the art can 
readily determine which preliminary conditions would be appropriate in a given 
situation. 

20 Once the client is connected to the same network as the server, the level 

of actual network bandwidth utilization is obtained at step 122. As shown in FIG. 4, 
the actual usage is sampled periodically (e.g., every fiive seconds). Preferably, this is 
done by tracking the number of incoming and outgoing packets over a given time 
period (e.g., one second) at the communications interface between the client and the 

25 network. For a PC running tiie "WINDOWS 98" operating system, tiiis information is 
available using the GetKEntry function in "iphlpapi.dll". 

Relatively large files provide a more accurate basis for measuring the 
level of actual network bandwidth usage at the network interface. For example, it is 
difficult to accurately measure the download time for a 200 byte file because the 

30 overhead of measurement is significant and the small file does not saturate the available 
bandwidth. Consequently, the present invention preferably updates the maximum level 
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of Utilization only when the measurement of the actual level of utilization is based on 
the transfer speed of a file that is at least 4 KB in size. 

Preferably, each of the "virtual devices" is enumerated to ensure 
accurate monitoring, especially in a system which is more complex than the system 74. 
5 The term "virtual device," as used herein, refers to any networking device with a device 
driver, such as modems (including cable modems and ISDN modems), network canis 
and DSLs (Digital Subscriber lines). Each channel of a 2-channel ISDN modem is 
considered to be a separate virtual device for the purposes of the present invention. 

Importantly, the level of actual network bandwidth utilization is 

10 monitored rather than simply relying on the rated or listed throughput of the networic 
device. The rated value is not reliable because, as a practical matter, the maximum 
throughput achieved by a modem is less than its listed throughput and may be different 
for each network session. Variables such as the quality of tiie telephone connection 
typically result in a maximum available bandwidth of less than 50 Kbps for a 56 Kbps 

15 modem. 

Moreover, rated values cannot be assumed to be accurate when a client 
is connected to the network by a proxy. In the system 84, there is a peer-to-peer 
connection between the first client 86A and the second client 86B over the intranet 88, 
and the first client 86A is in turn linked to the network 80 by a modem 78. Assuming a 

20 56 Kbps modem and a 10 Mbps intranet, the modem 78 is the bottleneck to tiie network 
80. Thus, if the first client 86A were utilizing 40 Kbps of the network bandwidth at the 
same time the second cMent 86B is utilizing only 5 Kbps of tiie bandwidtii, tiiere would 
not be sufficient network bandwidth available to download a set of data (e.g., a 
software update) from the server 82 to either client witiiout degradmg flieir otiier 

25 network activity. Moreover, it would not be accurate to assume either tiiat die second 
client 86B has a maximum tiu-oughput of 10 Mbps or that substantial bandwidtii is 
available because die second client 86B is only using 5 Kbps of die network interface. 
Here, in die case of remote access, tiie level of actual bandwidtii utilization for flie 
second client 86B can be obtained fix)m tiie RAS (Remote Access Service) device table. 

30 Thus, monitoring tiie actual tiiroughput at each virtual device advantageously adapts to 
configuration changes between sessions and is tiierefore a more reliable approach. 
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Ref erring again to FIG. 7, the maximum detected level of actual usage is 
initially set to zero. Then, at step 124, it is determined whether the actual usage is 
greater than the current maximum. If not, the actual usage is sampled again at step 122. 
However, if the actual usage is greater than the current maximum, then a new 
5 maximum is set equal to the current actual level at step 126. Next, a threshold level is 
calculated as a function of the maximum at step 128. The threshold is initially set to 
zero, and a new threshold is calculated each time a new maximum is detected. As a 
general proposition, the threshold level could be anywh^ from approximately 5%- 
80% of the maximum detected level. However, the presently preferred threshold level 
10 for Internet applications is ^proximately 33% of the maximum detected level. Once 
the new threshold level has been calculated, the actual usage is sampled again at step 
122. 

It should be noted that the present invention calculates the threshold 
level as a percentage of actual network bandwidth in Kilobits per second, as opposed to 

15 some other parameter, such as the percentage of time the network connection is busy 
over a given period. For example, a client machine utilizing its network connection 
75% of the time over the course of an hour is not necessarily using 75% of its available 
bandwidth. In fact, if the user at the client PC is merely reading a webpage, reading 
email, listening to music or the like, it is likely that the level of actual bandwidth 

20 utilization is weU below the maximum available bandwidth. Those skilled in the art 
will understand that the present invention, which is implemented at the client level, is 
fundamentally different from methods for limiting bandwidth at the hardware level 
(e.g., sockets). 

Each time the level of actual network bandwidth utilization is obtained 
25 at step 122, it is also compared to the current threshold level. At step 130, it is 
determined whether the actual usage is less than the threshold level. If so, a software 
update (or other set of data) available from the server can be downloaded over the 
network to the client. To minimize interference with any other present or future 
network activity of the client, the download is preferably performed by downloading 
30 the software update in several segments. Accordingly, at step 132, one segment of the 
file is downloaded from the server to the client If the client*s network activity 
increases after downloading the first segment, the download of the entire file can be 
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suspended until the actual usage drops back down below the threshold level. However, 
if the network is idle for an extended period of time, the download can be accelerated 
by downloading progressively larger segments of the file over the network. 

A counting device is provided in a preferred embodiment of the present 
5 invention to facilitate the downloading of progressively larger file segments. For 
example, a 144 KB file may be downloaded from the server to the client over the 
Internet by first transferring an 8 KB segment of the file at step 132 of HG. 7. A smaU 
segment such as 8 KB has been found to be an effective default because it uses 100% 
of the pipeline for a short period of time and permits frequent monitoring of actual 
10 usage between segments. Even if a user cUcks on an URL (Uniform Resource Locator) 
during the download of an 8 KB block, there will be no noticeable delay to the user. 
Moreover, in the event an interruption occurs, 8 KB is the most data that can be lost. 

At step 134, it is determined whether the entire file has been 
downloaded. Since the 8 KB block was the first segment of the 144 KB file, the entire 
15 file has not been downloaded and flie counter, which is initially set to zero, is 
incremented to "1" at step 136. The counter keeps track of the number of segments that 
have been downloaded consecutively witiiout interruption so that the size of the 
segments can be increased so long as network activity remains low. As an example, the 
size of the segments could be increased to 16 KB if the counter is equal to "2", and the 
20 size of the segments could be increased to 32 KB if the counter is equal to "4". This 
would enable the 144 KB file to be downloaded in seven progressively larger segments 
as opposed to 18 of the smaller 8 KB segments, provided network activity stays below 
tile ttireshold level. Although tiie larger segments take longer to download and 
therefore result in less fi:equent monitoring of die actual usage, tfiis approach takes 
25 advantage of any extended periods of low network activity. Typically a header 
accompanies each segment, so transferring a smaller number of larger segments also 
reduces network overiiead by reducing the total number of headers transferred over the 
network. Presentiy, a 64 KB segment is the largest segment fliat is preferred when 
using a 56 Kbps modem. 
30 After incrementing the counter at step 136, steps 122 and 130 are 

repeated. If die level of actual usage is no longer less tiian the tiireshold level, the file 
download is suspended and the counter is cleared (ie., set to zero) at step 138. Then, 
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the actual utilization is sampled again at step 122. In the event the download is 
suspended, the download will be resumed from the point of suspension. However, if 
the actual usage remains below the threshold level, the next segment is downloaded at 
step 132, and the process is repeated until it is determined at step 134 that the entire file 
5 has been downloaded. If so, the counter is cleared at step 140 and the loop ends at step 
142. 

It should be noted that the progressive download feature of the present 
invention may require filtering or a similar technique to overcome the Umitations of 
some existing servers. While progressive downloads have been widely available at the 

10 FTP (file transfer protocol) level, they were not available at the HTTP level until HTTP 
1.1 servers became available. As discussed above, the present invention utilizes a byte 
range approach with 8 KB file segments as a default. For the first segment, a byte 
range of "0-7999" is specified in the download request from the client, the range 
"8000-1S999" is specified in the download request for the second segment, and so on. 

15 However, the byte range portion of the request would be lost if an HTTP 1.0 server is 
encountered, and the entire file would be downloaded at once. One way to avoid this 
problem is to use an ISAPI (Internet Server Application Programming Interface) filter 
to simulate an HTTP 1.1 byte request across an HTTP 1.0 proxy. Then, even if an 
HTTP 1.0 server is encountered, the byte range infonnation will not be lost. 

20 Of course, the preferred size of the segment or byte range can vary 

dramatically based on factors such as the speed of the modem. The foregoing examples 
(e.g., the default segment size of 8 KB) are based on the assumption that a large 
number of users will access the network with 56 Kbps modems. However, it may be 
appropriate to assume that a large number of users will access the network with 28 

25 Kbps modems. In that case, the preferred default segment size would be 4 KB rather 
than 8 KB. Likewise, the progressively larger segments would be 8 KB and 16 KB 
rather than 16 KB and 32 KB. Those skilled in the art will appreciate that the use of a 
variety of other segment sizes is also contemplated by the present invention. 

In another embodiment of the present invention, the monitoring of actual 

30 bandwidth usage during an extensive download may be given more weight than the 
monitoring of actual bandwidth usage before or after such a download. That is, if a 
predetermined number of segments are downloaded consecutively, the average level of 
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usage for each of the segments is adopted as the new "maximum" level. For example, 
if the predetermined nmnber of segments is 10, the average level of usage during the 
downloading of ten consecutive segments would replace the previous maximum level 
even if the average level is less than the previous maximum value. Moreover, if 11 
5 segments are consecutively downloaded, the average level would be calculated for 
segments 2-11 so that a moving average of 10 downloads determines both a new 
maximum level and a new threshold level. 

Using a moving average to identify the maximum level advantageously 
provides a dynamic increase or decrease to the threshold level in response to changing 
10 network traffic conditions without compromising the accuracy of the measurement 
Preferably, the maximum level will remain frozen at the most recent moving average 
(of the predetermined number of segments) until another extensive download occurs. 
In other words, a maximum level based on an extensive download is deemed to be a 
more accurate reflection of available bandwidth than the initial maximum level 
15 measured prior to a download. Likewise, the download of an isolated segment may not 
provide an accurate reflection of available bandwidth. To keep track of the number of 
consecutive downloads for the moving average, a counter such as the one referenced in 
PIG. 7 may be used. 

Another embodiment of the present invention is described below in 
20 conjunction with HGS. 8-10. With reference to HO. 10, the further embodiment of the 
present invention monitors the level of actual network utilization represented by the 
curve 804 (HG. 8) and calculates the size of a block of data that can be transferred 
within a predetermined interval (Tn.i Tn) (FIG. 8) such that transfer of data between 
the client and server is not Ukely to interfere with, other network activity. A block 
25 represents a portion of an entire set of data that is to be transferred or other independent 
useful unit of data. This further embodiment more fully utilizes the available 
bandwidth of a Network by computing block sizes and refining network speed 
esthnates, as opposed to an embodiment as described above that utilizes a fixed 
threshold value to determine when to transfer data. 

In practice and by way of example and not limitation, FIG. 8 illustrates 
some concepts from the further embodiment of this invention. As shown in FIG. 8, the 
sampling time is generaUy designated by Tn and the interval Tn-i - Tn is initially set to a 
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value such as 1 second. In FIG. 8, the region (Area 1) under the external usage curve 
804 between the intervals Ti and T2 (808) would represent the total number of bytes 
that were transferred by processes other than the current invention. The region (Area 2) 
bounded by the observed network throughput 802, the external usage curve 804, and 

5 the intervals Ti and T2 (808), represent the amount of bytes that could potentially be 
assigned for a block size. As shown, the Network throughput 802 and external usage 
804 fluctuate over time, thereby necessitating the re-computation of block sizes in order 
to fully utilize the available bandwidth. Network activity is sampled at various points 
during each interval. The sampling interval is then adjusted in response to the 

10 determined network speed and utilization, rather than being maintained at a fixed value 
in contrast to the embodiment of FIGS. 4-7. This reduces CPU and network overhead 
that arises from using block sizes that are not optimized for the Network. 

This embodiment includes three components. Ibere is a network 
interface component that collects data about the number of bytes sent and received 

15 through the Network interface hardware. There is a network speed calculator 
component that determines Global speed, Download speed and Free bandwidth. 
Finally, there is the Data Block Download component that uses the values computed by 
the speed component to compute a block size and download interval size. 

The algorithms used by this further embodiment are detailed below. 

20 Here again, it should be noted that the references within the following algorithms are 
exemplary, since this algorithm is equally applicable to the upload of data. 

The embodiment divides each time interval into two phases, a download 
phase and an idle phase. During the download phase, the software downloads a block 
of data from the server. During the idle phase, the software relinquishes the network to 

25 other applications. 

The network-monitor component of the embodiment has access to a 
counter that records the number of bytes that have passed through the network interface 
at a given moment. The difference between two readings of the counter indicates the 
number of bytes that have been transferred in the time between the two readings. 

30 During each time interval (Tn-i - TJ, the network-monitor component 

samples the system clock and bytes-transferred counter at ihree points: (1) the start of 
the interval, which is also the start of the download phase, (2) the end of the download 
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phase, and (3) the end of the interval. The download component records the interval 
length, the size of the block to be downloaded, and the expected duration of the 
download phase. At the end of the interval, the network-speed component updates its 
speed estimates as follows: 
5 1. If a block was downloaded during the interval, the download rate is 

calculated: 

last-rate = (block size + network header size) / (time at point 2 - time 
at point 1) 

and the average download rate is updated. The current embodiment uses the 
10 formula 

1. new-download-rate = old-download-rate * (sample-count-1) / 
sample-count; 

2. new-download-rate = new-download-rate + (last-rate / sample- 
count); 

15 with sample-count set to 3 however, many other averaging formulae could be 

used instead. This is also true of the other average values that the downloader 
calculates. The average download rate will enable the block-download 
component to choose a block size that can be completed during the download 
phase of the next interval. 

20 

2. The component measures network utilization during the download phase to 

arrive at global-speed: 

Bytes-transferred = (bytes at point 2 - bytes at point 1) 
Download-phase-length = (time at point 2 - time at point 1) 
^5 last-global-speed = bytes-transferred / download-phase-length 

If this is the first interval since the start of the downloader, the global-speed is 

set to last-global-speed. 
Otherwise, 

if last-global-speed < global-speed / 2 
^0 then global-speed = (global-speed * 0.9). 
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Last-global-speed is averaged into global-speed by the same algorithm used for 
the average download rate. Global-speed is used as an estimate of the total 
throughput of the network interface. 

5 3. Measure the network utilization over the whole interval, calculate the portion 

that is from sources external to the downloader, and calculate percent-free: 

Bytes-transferred = (bytes at point 3 - bytes at point 1) - (block size + 
ovOThead) 

Actual-interval-length = (time at point 3 - time at point 1) 
10 Extemal-utilization = bytes-transferred / actual-interval-length 

Percent-free = 100 * (1 - extemal-utilization / global-speed ) 
The block-downloader component uses Percent-free to choose the 
relative length of the download phase and idle phase of the following download 
interval. The further embodiment limits percent-free to 80% as insurance against an 
15 increase in extemal activity, other similar policies are also possible. 

The further embodiment adjusts the duration of the sampling interval 
depending upon the network speed and utilization, rather than using a fixed value as in 
FIGS. 1-7. This reduces CPU and network overhead that arises from using block sizes 
that are not optimized for the Network. For instance, in many implementations, using a 
20 very large block size would require dedicating a prohibitive amount of memory as a 
buffer. Conversely, sending data as a series of very small blocks may waste resources 
by requiring extra network header fields and network protocol acknowledgements. 
Deriving block sizes that take full advantage of Network bandwidth and that minimize 
the interference to Network traffic is an advantage of this further embodiment. There 
25 are several steps and components involved in determining appropriate block sizes. 

For the purpose of further illustration and with reference to HG. 8, 
assume that the upper bound for a block size, which is dictated by the memory of the 
downloader, is 30 Kb, i.e. the downloader can hold 30Kb of data before it needs to 
write to a disk. Assume further that that the default interval duration is one second and 
30 the computed block size for interval Ts-Te is 35 Kb, which is beyond the maximum. As 
such, the algorithms of the present invention will shrink the durations of the next 
interval intervals Te - T7 in order to reduce the block size below the maximum. 



wo 01/61944 PCTAJSOl/04885 

-22- 

Continuing with this illustration, if the interval T6-T7 were reduced to 0.8 seconds for 
example, it will result in a computed block size of 28 Kb, which is within the bounds 
for a block size. Thus the next interval T7 - Tg (820) will also be set at 0.8 seconds 
instead of 1 second. Those skilled in the art will appreciate that the use of a variety of 
5 interval values and other block size boundaries are also contemplated by the present 
invention. Conversely, a block size is considered to be too small when the computed 
size falls below a default lower boundary which has been determined to be an 
inefficient size of data to transfer in the given interval. In this case, the downloader 
may choose to download the minimum size and then download nothing for one or more 

10 intervals, or it may choose to increase the mterval length. 

Several conservative approaches are taken in this further embodiment to 
support an acceptable level of system responsiveness while more fully utilizing 
available network bandwidth. Those skilled in the art will appreciate that any number 
of more or less conservative approaches could be used and are contemplated by the 

15 present invention. More specifically, a smoothing of the sampled network data is 
achieved by using an average for the Global Speed and Download Speed wherein, the 
average is weighted in favor of the most recent sample. In computing the running 
average, the latest sample counts for 30% of the new total, with the previous value 
counting for 70%. While this particular method of diluting the latest value with 

20 previous averages is used, other implementations would achieve the same result of 
allowing recovery jfrom spikes in network activity. For example, keeping the last 10 
samples and then re-computing an average using all the saved samples and the newly 
obtained sample each time would achieve the same result. Another approach that is 
taken involves a global rate that is determined to be less than one half of the average 

25 usage rate. In this case, it is assumed that the reduction is a result of client inactivity 
rather than a sudden loss of bandwidth. Thus, the newly determined Global speed 
value is not introduced into the average because that would unduly reduce the 
bandwidth average. However, the Global speed average is slightly reduced by a value 
such as 10%, in case the bandwidth really has changed. An example of such a 

30 bandwidth change would be if the telephone line noise suddenly increased due to a 
thunderstorm in the area. Yet another conservative approach that is taken involves 
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limiting the Percent-free to a value such as 80%, in order to leave a little cushion for 
other applications. 

The further embodiment of the present invention utilizes a data 
structure 900 illustrated in HO. 9. The data structure 900 includes a first field 912 

5 which contains the time at which the identified level of actual bandwidth utilization 
was taken and a second field 914 which contains the total number of bytes through the 
network interface, a monotonically increasing counter of the bytes that have been sent 
or received by the adapter. As shown in FIG. 8, both the timestamp and the bytes count 
vary with each sampling, depending on the level of actual utilization 802. . By 

10 subtracting consecutive measurements of these values, an interval period and number of 
bytes transferred during the interval period are obtained. 

HG. 10 sets forth a flowchart representative of a computer program for 
selectively transferring data over a network in accordance with the further embodiment 
of the present invention. The program is started at step 1000 when certain 

15 predetermined conditions are present. Once the client is connected to the same network 
as the server, the block size, Percent-firee, and sampling interval are initialized to 
default values at step 1002. As shown in FIG. 8, the actual usage is sampled 
periodically (e.g., every second). Preferably, as discussed above, this is done by 
tracking the number of incoming and outgoing bytes at important moments of the 

20 interval sample period (e.g., Start of interval, end of block transfer and end of interval) 
at the communications interface between the client and the network. 

Referring again to HG. 10, based on the initiaHzed values for block size, 
Percent-free and interval, a block download and network data collection take place at 
step 1004. Then, at step 1006, the network speed related elements namely Download 

25 speed, Global speed and Percent-free are refined and updated accordingly. Next, a 
block size is calculated as a function of the network speed related elements at step 
1008. A new block size is calculated each time after a block download. As a general 
proposition, the block size could be anywhere between the size of communications 
packet header and the size of the memory allocated for the downloaded The presently 

30 preferred n^iinimum block size for Intemet applications is approximately 1000 bytes, 
500 for block data and 500 for HTTP request and reply packet headers. Once the size 
has been calculated, the actual usage is sampled again at step 1004. 
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At step 1006, an average of download speed and Global speed are 
computed, along with the network Percent-free value. As previously discussed with 
reference to FIG. 8, during this process, it is determined whether the observed Global 
speed is within an acceptable range of the average Global speed, and whether Percent- 
5 free is less than a predetermined maximum fraction of bandwidth value. In the further 
embodiment of this invention, the observed Global speed must be greater than one half 
of the average Global speed in order to be included in the computation of a new 
average Global speed. Otherwise, the new average is determined to be 90% of the 
previous average Global speed. With regards to Percent-free, the further embodiment 
10 of this invention may require that a computed Percent-free value can be no greater than 
80%. 

Software updates (or other set of data) available from the server can be 
downloaded over the network to the client. As discussed above, to minimize 
interference with any other present or future network activity of the client, the 

15 download is preferably performed by downloading the software update in several 
segments otherwise referred to as a block. Accordingly, at step 1004, one segment of 
the file is downloaded from the server to the client. If the client's network activity 
increases after downloading the first segment, the further embodiment wiU download 
smaller blocks unless the block size drops below the previously discussed minimum. 

20 However, if the network becomes idle, the next iteration of step 1006 will increase the 
block size appropriately. 

At step 1008, the computed block size is bounded to a lower and upper 
value. The lower boundary is a size so small that it is more efficient to do nothing in 
that particular interval. If a computed block size is below this boundary during two 

25 consecutive intervals, the size of the interval is incremented and no block is 
downloaded during this second interval, as shown at step 1010. If the computed block 
size remains below the lower boundary during the newly incremented interval, the 
block size is set to a '*Busy-block-size" and the interval is set to a default interval value. 
Busy-block-size is a value that allows a minimal download to occur such that, 1) some 

30 progress is made in the download process, 2) the invention is able to address a situation 
wherein a server is so slow that the calculated block size may never rise to the 
downloader minimum, and 3) the process of downloading allows the refinement of 
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estimated network speeds. A block size that exceeds the maximum boundary results in 
a shrinking of the interval so that the computed block size can be kept within bounds. 

The present invention has been described in connection with exemplary 
embodiments which are intended to be illustrative rather than restrictive. For example, 

5 the invention has been described in the context of downloading software updates for the 
operating system of the PC. The software updates could just as easily relate to many 
other types of software, such as updates to video games on the PC. Moreover, flie data 
to be downloaded may include text, image and/or audio data. The present invention is 
also equally applicable to uploads from the client to the server. 

10 Alternative embodiments of the present invention will become apparent 

to those skilled in the art to which it pertains upon review of the specification, including 
the drawing figures. Accordingly, the scope of the present invention is defined by the 
appended claims rather than the foregoing description. 
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CLAIMS 

1. A method of transferring a set of data over a network, the 
method comprising: monitoring the level of actual network bandwidth utilization; 
5 identifying a maximum monitored level of actual utilization; calculating a threshold 
level of utilization as a function of the maximum monitored level of utilization; and if 
the actual level is less than the threshold level, receiving at least a portion of the set of 
data over the network* 

10 2. The method of claim 1, wherein a client receives the data over 

the network from a server. 

3. The method of claim 2, wherein said monitoring occurs at the 
interface between the client and the network. 



15 



4. The method of claim 1 , wherein the network is the Intemet 



5. The method of claim 1, wherein the threshold level is equal to a 
predetermined percentage of the maximum monitored level. 

20 

6. The mefliod of claim 1, wherein the set of data includes a 
software update. 

7. The method of claim 1, further comprising repeating at least said 
25 monitoring step each time a portion of the set of data is received. 

8. The method of claim 7, wherein said receiving step includes 
separately receiving a plurality of discrete portions of the set of data over the network 
when the actual level is less than the threshold level. 

30 

9. The method of claim 8, further comprising incrementing a 
counter each time a discrete portion of the data is received over the network. 
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10. The method of claim 9, wherein the size of the discrete portions 
of the data is a function of the value of the counter. 

11. The method of claim 10, further comprising increasing the size 
5 of the discrete portions of the data when the value of the counter is greater than a 

predetermined value. 

12. The method of claim 9, further comprising clearing the counter 
after receiving ail of the plurality of discrete portions of the data over the network. 

10 

13. The method of claim 9, further comprising clearing the counter if 
the level of actual utilization becomes greater than the threshold level. 

14. The method of claim 8, further comprising suspending the 
15 receipt of discrete portions of the data if the level of actual utilization becomes greater 

than the threshold level. 

15. The method of claim 14, further comprising resuming the receipt 
of discrete portions of the data from the point of suspension when the level of actual 

20 utilization becomes less than the threshold level. 

16. The method of claim 1, further comprising: repeating said 
monitoring step each time a portion of the set of data is received; identifying a 
maximimi level of utilization during receipt of the set of data; and calculating a 

25 threshold level of utilization for the set of data as a function of the maximum level of 
utilization identified during receipt of the set of data. 

17. The method of claim 16, wherein said identifying step includes 
estimating the maximum level of utilization during receipt of the set of data by 

30 calculating an average level of utilization for the set of data upon repeating said 
monitoring step a predetermined number of times' during receipt of the set of data. 
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IS. The method of claim 16, further comprising receiving at least a 
portion of the set of data over the network if the actual level is less than the threshold 
level for the set of data. 



19. The method of claim 16, further comprising receiving at least a 
portion of a second set of data over the network if the actual level is less than the 
threshold level for the set of data. 



20. A computer-readable medium having computer-executable 
10 instructions for performing the steps recited in claim 1. 

2L A computer system having a memory, an operating system and a 
central processor, said processor being operable to execute the instructions stored on 
the computer-readable medium of claim 20. 

15 

22. A computer-readable medium having stored thereon a data 
structure, comprising: a first data field containing data representing a maximum 
monitored level of actual network bandwidth utilization; and a second data field 
containing data representing a threshold level of network bandwidth utilization below 
20 which data may be transferred over die network without interfering with other network 
activity, wherein said second data field is derived from said first data field by 
calculating the threshold level as a function of the maximum monitored level. 



23. The computer-readable medium of claim 22, wherein the 
25 threshold level is calculated as a predetermined percentage of the maximum monitored 
level. 



30 



24. The computer-readable medium of claim 22, wherein the actual 
network bandwidth utilization is monitored at an interface between a client machme 
and the network. 
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25. A computer-readable medium having computer-executable 
components for managing the transfer of data over a network, comprising: a bandwidth 
monitoring component which monitors the level of actual bandwidth utilization for a 
network connection and identifies a maximum monitored level of utilization; a 

5 threshold calculating component which calculates a threshold level of utilization as a 
function of the maximum monitored level of utilization identified by said bandwidth 
monitoiing component; and a transfer management component which manages the 
transfer of data over the network when the level of actual bandwidth utilization is less 
than the threshold level of utilization. 

10 

26. The computer-readable medium of claim 25, wherein the 
network connection is an interface between a client machine and the network. 

27. The computer-readable medium of claim 25, wherein the 
15 threshold level is calculated as a predetermined percentage of the maximum monitored 

level. 

28. A method of communicating between a client process and a 
server process over a network, the method comprising: (a) issuing to the server process 

20 a first download request which identifies a file and which requests that the server 
process download a first segment of the file over the network; (b) downloading, by the 
server process, the first segment of the file; (c) issuing to the server process a further 
download request which is associated with the file and which requests that the server 
process download a further segment of the file over the network, provided the actual 

25 network bandwidth utilization is less than a threshold level; (d) downloading, by the 
server process, the further segment of the file; and (e) repeating steps (c) and (d) until 
the server process has downloaded each segment of the file over the network. 



30 
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29. A method of transferring a set of data over a network, the 
method comprising: monitoring the level of actual network bandwidth utilization; 
identifying a maximum monitored level of actual utilization; calculating a block size to 
transfer as a function of the maximum monitored level of utilization; and receiving said 

5 block size portion of the set of data over the network at one or more intervals. 

30. The method of claim 29, wherein said maximum level of actual 
utilization comprises: calculating an average of network bandwidth utilization; 
calculating an average transfer rate; and calculating a bandwidth availability 

10 percentage. 

31. The method of claim 29 wherein said block size is adjusted 
according to said maximum level of actual utilization, the mefliod comprising bounding 
said block size between a maximum threshold value and a minimum threshold value. 

15 

32. The method of claim 31 wherein said maximum threshold is a 
function of available memory in the receiving device, and wherein said minimum 
threshold is determined based on network packet header size. 

20 33. The method of claim 29, wherein a client receives the Hat^ over 

the network from a server. 

34. The method of claim 33, wherein said monitoring occurs at the 
interface between the client and the network. 

25 

35. The method of claim 33, further comprising: increasing the size 
of the intervals when said block size is below a minimum threshold; and decreasing the 
size of the intervals when said block size exceeds a mayinniTn threshold. 



30 



36. The method of claim 29, wherein the network is the Internet. 
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37. The method of claim 29, wherein the set of data includes a 
software update. 

38. The method of claim 29, further comprising repeating at least 
5 said monitoring each time a portion of the set of data is received. 

39. The method of claim 29, wherein said maximum level derivatign 
includes calculating an average level of utilization by repeating said monitoring a 
predetermined number of times during the receipt of said portion of the set of data . 

10 

40. The method of claim 29, further comprising repeating said 
msbcimum level of actual utilization identification each time a portion of the set of data 
is received. 

15 41. The method of claim 29, wherein a client sends the data over the 

network to a server. 

42. A computer-readable medium having computer-executable 
instructions for performing the method recited in claim 29. 

20 

43. A computer system having a memory, an operating system and a 
central processor, said processor being operable to execute the instructions stored on 
the computer-readable medium of claim 42. 

25 44. A computer-readable medium having stored thereon one or more 

data structures, comprising: a first data field containing data representing a timestamp 
of when the level of actual network bandwidth utilization was monitored; and a second 
data field containing data representing a quantity of data that had passed through the 
network interface at the a time corresponding to said time stamp. 

30 
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45. The computer-readable medium of claim 44, wherein network 
utilization is calculated based on the difference in values between a first data structure 
and a second data structure. 

► 46. The computer-readable medium of claim 44, wherein the actual 

network bandwidth utilization is monitored at an interface between a client machine 
and the network. 



47. A computer-readable medium having computer-executable 
10 components for managing the transfer of data over a network, comprising: a bandwidth 
monitoring component which monitors the level of actual bandwidth utilization for a 
network connection; a network speed calculating component which calculates a 
network transfer speed as a function of the monitored level of utilization observed by 
said bandwidth monitoring component; and a transfer management component which 
15 manages the transfer of data over the network. 



48. The computer-readable -medium of claim 47, wherein the 
network connection is an interface between a client machine and the network. 

20 . 49. A method of refining network utilization determination and 

download data block sizes in the transfer of a set of data over a network comprising: 
obtaining a network utilization rate at a plurality of intervals; computing an average of 
said network utilization rates; and computing a block size of data to transfer during said 
intervals as a function of said average. 

25 

50. The method of claim 49 wherein obtaining said network 
utilization rate occurs at specific points in time during each of said intervals. 

51. The method of claim 49 wherein said computed average is 
30 weighted by allocating a higher ratio to the more recently obtained network utilization 

rate. 
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52. The method of claim 49 wherein said block size is directly 
proportional to the product of said average, the size of said interval and network 
availability. 

5 53. The method of claim 49 wherein said intervals have a size that is 

adjusted based on said computed block size. 

54. The method of claim 49 further comprising transferring a 
minimum block of the set of data over the network to allow the refining of variables 

10 associated with the network utilization determination. 

55. A computer-readable medium having computer-executable 
instructions for performing the method recited in claim 49. 

15 56. A computer system having a memory, an operating system and a 

central processor, said processor being operable to execute the instructions stored on 
the computer-readable medium of claim 54. 
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